Cisco ACS / ASA sends two requests to Authentication Manager 8.x

Originally Published: 2014-12-12

Last Modified: 2023-10-06

Article Number

000049743

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Platform: SUSE

Issue

The real-time authentication activity monitor of the authentication manager instance shows a successful authentication from the CISCO ACS / ASA device and then a short time later another authentication appears. The second authentication fails with 'Authentication method failed, passcode format error' as the reason.

Native SecurID authentications from other Authentication Agents are working without issue.

Cause

The CISCO ACS / ASA device was configured to send an authentication and authorization request to the RSA Authentication Manager. RSA Authentication Manager processed the authentication request successfully but did not know what to do with the authorization request hence the error reported in the real-time authentication activity monitor.

Resolution

Please refer to CISCO ACS / ASA documentation for making changes to the CISCO configuration to only send authentication requests to the RSA Authentication Manager.

RSA Ready Community is a platform for customers, partners and RSA enthusiasts to learn about products that have been certified to inter-operate with RSA products, including access to integration guides. The CISCO ACS / ASA and RSA Authentication Manager integration is available from URL https://community.emc.com/docs/DOC-37405

Don't see what you're looking for?

Related Articles

Trending Articles